And again: IPsec up but no traffic from local network

Fixed by adding ipsec0 to wan:

config zone                  
        option name 'wan'     
        option input 'REJECT'  
        option output 'ACCEPT'     
        option forward 'REJECT'
        option masq '1'
        option mtu_fix '1'
        list network 'wan'   
        list network 'wan6'   
        list network 'wana'    
        list network 'wanb'                                          
        list device 'ipsec0'

like described here Destination Port Unreachable - #16 by mk24